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This application is a Continuation-in-Part of application serial number 09/794,386, filed February 28, 
2001, entitled "System, Method And Medium For Certifying And Accrediting Requirements Compliance", 
I which in turn claims priority to application serial number 60/223,982, filed August 9, 2000, entitled "Web 
Certification and Accreditation System, Method and Medium", each of which is assigned to the assignee of 
this application and incorporated herein by reference. 
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FIG 23 showV an exemplary Threat Environment screen, which shows the calculated level of risk 
based on the information that was provided in step 100. As per at least some embodiments, the present 
invention automatically calculates the risk, which is indicated under the Calculated Value 2302 heading. This 
could be accomplished in any number of ways based upon data obtained during the current and/or testing 
phase, as indicated above. The User Defined Value 2304 preferably defaults to the corresponding Calculated 
Value 2302 for a given threat environment element (e.g., 1, 2, 3, etc.). However the user/analyst has the 
opportunity to optionally override the calculated risk rating by clicking on the User Defined Value 2304 for 
each corresponding threat element. As previously discussed, exemplary available choices are negligible, 
low, medium, or high, although they could also be, e.g., numerical in nature. _ 
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